The article is awkwardly formulated, but gets clear later on: the attack happens over a USB flash drive, but air gap doesn’t remove communications from the infected machine until you remove the mike/speakers.