In order to defeat this system, the attacker would need control of the lottery ball machine. But we're already assuming that the attacker has control over some

In order to defeat this system, the attacker would need control of the lottery ball machine. But we're already assuming that the attacker has control over some of the election machines, so while this is still strictly better, it's small comfort.