Ah, I thought this was about another kind of secrecy emphasized in the article:
>We don't just need votes to be anonymous and private (while still making the final result provable and public); we need votes to be so private that even the person who made the vote can't prove to anyone else what they voted for. [emphasis theirs]
This is the part I was saying doesn't seem so necessary.