duuuuuude you need to airgap that shit.
ive got an isolated vlan with its own access point only accessed by my work laptop
That's not an air gap. "VLAN" already implies you have a direct physical connection between the networks, and "access point" implies you are using wireless LAN on top which is the literal opposite of an air gap.