This is all devastating. These kinds of devices should use a a cryptographic tramper-evident log, and those logs should be available to the public in real time

This is all devastating. These kinds of devices should use a a cryptographic tramper-evident log, and those logs should be available to the public in real time for archival purposes. That's the only way to avoid tampering. The same should be used for things like, e.g., rolls of who voted at every precinct.