>For individual use I guess the solution is to set it up once with internet connectivity and air gap afterwards.

That's simply not good enough for some purposes. Once a computer is connected to the internet, at all for any amount of time, the system could be considered to be less secure.