[mariusor]

I don't find your model of the paper ballot much safer than the one of voting through an electronic device. Yes the paper might say you voted for A, but the chain of interactions between you placing the vote in an urn and the vote being counted for A, is as long and as uncertain as in the electronic model.

You choose to trust the humans more, which is fine, but applications (or why not) devices with a well defined audit trail that they're doing what they're supposed to do are equally trust worthy (at least for me).