IlovePizza

Couldn't malicious instances use random users aswell? What if there's some sort of user manifest that shows all users an anonymous hashes belonging to that instance? That way you could check there are the same number of both.

Good point. Would it be useful to somewhat anonymize them by giving every user a unique code? So admins would see these codes but not easily know what users they represent.

There are many things that don't happen because nobody does them. Or should we start walking around in a bullet proof vest in case we're shot?

I read about that. In my opinion is that what should change, if possible. There are good reasons why votes a secret in democracies.