> session is RDP over a local socket (I think)

my understanding is that it's done via shared memory, and if that's right, it's very close to, if not actually, an air gap.