My feeling is that if you're super serious you should generate your keys on an air-gapped computer and sneaker net the messages to a networked computer using floppy disks. No USB should touch your air gapped machine. Read the decrypts on the air-gapped machine with a curtain over your monitor.