Maybe a way to solve this is some further blockchain or other tech for new anonymization for each new day voted. Basically, a new “user ID” for each total ballot cast every time a person goes in to vote, leaving as little identifying information attached to front end for later review.
Perhaps a hybrid of the current county-by-county checkin system many American municipalities currently have setup on Election Day combined with this anonymization each time could yield the most “private” results. Explorations in total viewing? Permitted later viewing only by using passcode? Clear expiration notices in UI?