Not my point. My point is that security is not a technical exercise, it's an administrative and usually psychological one. Case in point: my current client has a password security policy that requires you to use a minimum of 12 characters, one of which must be a number and one of which must be non-alphanumeric, passwords expire every other week, and you can't use any of your last eighteen passwords. Technically very secure...and it forces people to write down their passwords and keep them near the computer, so that in terms of actual security it's completely counter-productive. The history of IT security is replete with examples like this, straight back to Lee's Lost Order before Sharpsburg and beyond.
Which does not mean that you can skimp on technical security (2-digit PIN? MS Access? ) It does mean, though, that if you focus analysis strictly on technical security, you're not analysing security at all.
The real problem is that American society nowadays is programmed to automatically assumed that the answer to anything is "better technology"...which usually causes more problems than it solves. The real solution to FL's balloting problems in 2000 wasn't better voting machines, it was a better definition of "What is a vote, and how do we count them?"