If you use something such as the CIYAM Safe (http://susestudio.com/a/kp8B3G/ciyam-safe) then you just make sure your tx computer is *permanently* offline (by that I mean *remove* the WiFi card and disable/destroy any other standard way to get network connectivity such as plugging in an ethernet cable).
It is a LiveOS and doesn't even access the HDD of the machine being used so it doesn't matter how infected its OS is.
It also doesn't require you to use a USB for comms (that can be all done via QR codes for 100% "air-gapped" safety).