There's a video on the ballot box. It's under security cams until it's opened. Every vote counter has a camera over their shoulder and the picture is clear enough to see every ballot. Chain of custody is verifiable by video at all times. The law is clear what happens when chain of custody is broken and this consequence is advertised to the people.
Anything less than this is a beautiful ideal meeting cold reality, not a flaw in the ideal.
How are recounts done? What if we want an audit?