My point is that unvetted IP/code shouldn't be used in democratically critical processes such as elections in the fist place, doing so increases the surface are

My point is that unvetted IP/code shouldn't be used in democratically critical processes such as elections in the fist place, doing so increases the surface area of bad actors to act maliciously.