In cryptocurrency practice an air-gapped machine generates and holds keys, and transactions cross the gap as QR codes or files on removable media for signing. The online machine never sees key material.
An air gap addresses remote compromise. It does not address physical access, a compromised supply chain, or mistakes in what gets carried across the gap, and the signed data itself can leak information if the offline machine was seeded with tampered software.