No, as long as you don't compromise even a single private key from your air-gap wallet.
Otherwise, the only risk is your privacy in case the watching-only wallet's extended public keys are compromised.

As a heads-up, Bitcoin Core already taken the necessary precaution against that by disallowing the exportation of individual private key from a descriptor wallet.
There are workarounds to do so but be aware that the "extended private key" pair of the watching-only wallet's "extended public key" can be computed from any of its child private key.
So if you ever require to export a key, do everything exclusively in the same air-gap machine where the offline Core is installed.