Unless the implementation has bugs. Then, the sensitive area is just a single zeroday away. Airgaps don't have that attack surface.
I agree with your previous point that we should encrypt point to point, but that's one layer up from the problems SDN is solving.
Just for clarification: That was written by bluejekyll, not by me.
Unless the implementation has bugs. Then, the sensitive area is just a single zeroday away. Airgaps don't have that attack surface.