One of the authors makes the point that a separate random number generator can be more effectively protected from manipulation than can a voting machine.
A mathematical security reduction proof can then prove that as long as the number theoretical problems are hard, the random number generator itself is secure.