Yes, they can at some point in the flow unambiguously tie a specific vote to a voter. Postponing the "separation" to after the paper ballots have been cast is t

Yes, they can at some point in the flow unambiguously tie a specific vote to a voter. Postponing the "separation" to after the paper ballots have been cast is then a simple trick. How it works is they encrypt the vote (using assymetric encryption), and then sign that datapackage with the private key on your ID card. Once the votes need to be counted, the signature is removed, and all the resulting encrypted vote data is then sent (without identifying information) to a third server which has the private key to decrypt the votes. They are decrypted and then counted. This third server has no access to identifying information. The server stripping votes from identifying information has no access to the decrypted data.