It is then slipped into a security sleeve to make it harder to read within the envelope.
The envelope is sealed and signed by the citizen.
Security is provided by the envelope which is the attestation that the citizen cast their ballot. Offhand, the county voting office is likely required to retain the ballot as part of the state/federal records. I haven't checked but that or a centralized ballot repository are the only things that make sense.