> At any later time you can check with an independent device and look at the transaction finding out that it was altered

This implies there is a record establishing a relationship between person A and vote X.

The fact most people won't bother to check it in practice is irrelevant. It must be impossible, because otherwise people are going to die.