Maybe with a schema that allows a one time verify, and then churns your entry. If that verify occurs upon entry synchronously at the time you vote, if possible, that’d be no less safe than the paper ballot you feed into the machine.