It would be incredibly easy to hijack all of their votes
No, it wouldn't. The only way a ballot could be added to the database would be with a password
and the registered voter's fingerprint.
Any hijacking would be immediately visible. If thousands of voters' ballots were missing or changed in the database when the voters checked on them, a big fuss would be made immediately. It wouldn't matter what software was used to place the ballot into the secure, audited, linux-OS database. Once the ballot got in, it would be secure and could be be immediately confirmed by the voter as being correct.
tanstaafl.