The firmware images and hardware designs should be public too, with extensive auditing of machines in the field to check for backdoors or supply chain compromise.

Or, pencil and paper ballots.