so what happens if you have a keylogger on your computer?
Create encrypted private key on air-gapped machine, copy via USB (or type manually).
1) Usb keys are known to be capable of having viruses on them even if they are not connected to the internet.
As far as I understand the infamous Stuxnet virus operated like that.
2) seems like a massive hassle to type things manually from an air-gapped machine.
3) In my opinion having such concerns kind of ruins the point of purchasing a special BTC hardware wallet. If you need the wallet and additionally need an air gapped machine you may as well just purchase a different hardware wallet that is less of a hassle eg. a trezor or a Case hardware wallet etc
This is multi year cold storage that can be loaded up by qr code into a mobile wallet such as mycelium or manually entered in seconds. The only hassle is creating the bip38 address securely.