>2) the USB storage provided by network card can still contain malware,

That seems unlikely given that "malware" is signed by Microsoft Windows Hardware Compatibility Publisher.

https://news.ycombinator.com/item?id=42680282