My feeling is that if you're super serious you should generate your keys on an air-gapped computer and sneaker net the messages to a networked computer using floppy disks.  No USB should touch your air gapped machine.  Read the decrypts on the air-gapped machine with a curtain over your monitor.