I remember an example of some arcane software that was used "internally" by some local German office to just sum up the votes and generate some kind of result sheet for the local area.

It turned out, although it was air-gapped, it was susceptible to an attack against its update mechanism. Some white-hats showed it was possible to inject malicious code and change the results.

You never know. That's the essence of the problem.