Mail in ballots don’t get rid of secrecy, unless the system has been tampered with, which you could also do with illegal cameras at in-person voting etc. Anonymous envelope-within-envelope is a pretty standard way to keep secrecy, and many states do it, like mine.