Comment by michaelt

The threat model is corrupt election workers, who have unmonitored access to the machines.

And if you find problems after the winner is declared? “Only the losing side cares, and they’re just sore losers”

Or an adversary could not commit fraud, just trip the fraud alarms in areas their opponent is strong.

So it’s very, very difficult to secure.