Threats of physical violence? Bribes? There are ways to design the system that guarantee that the voter can verify they voted but can't prove who they voted for. No need to keep the UUID secret. It's very desirable to have a system that we can trust even if conditions aren't necessarily antagonistic.
BTW, thanks for engaging in this discussion. It's important and it's helping me rethink through all of this.