Security
A policy can be changed. A missing adapter cannot.
What's sealed.
The model runs on the machine your business controls. Your files sit beside it in a vault with no network adapter.
How files get in.
Your concierge loads them during setup. After that, new files arrive only by local, physical means.
Where your files live.
In an encrypted vault on the same machine, with no network adapter. Not disabled. Absent.
How anything gets out.
Only by hand, opened by you, one item at a time, and you see it happen.