It works well enough because all of the real authentication happens after you register and before you ever get a ballot. So there isn't really much fraud risk

It works well enough because all of the real authentication happens after you register and before you ever get a ballot. So there isn't really much fraud risk from you actually sending in the ballot, the signature is just the cherry on top.