But it's not a replacement for air gaps. It's a replacement for things like logging into your switch to manually set up vlans.

I agree with your previous point that we should encrypt point to point, but that's one layer up from the problems SDN is solving.