I agree that a system that only has electronic records is very problematic. However, a system that includes a physical component (such as a paper ballot receipt) can be used as part of an electronic system to permit something that's auditable and verifiable.
https://en.wikipedia.org/wiki/End-to-end_auditable_voting_sy...