It's true, SCIF and compartmentalization eventually demands an air gap between TS-SCI and the rest of the world. Eventually everything interesting gets tainted

It's true, SCIF and compartmentalization eventually demands an air gap between TS-SCI and the rest of the world. Eventually everything interesting gets tainted. Hence the suggestion never to run anything with any more ACLs than necessary in production systems that touch non-secured bits