Seems like the best system is electronic that prints out a machine readable and human readable tape that the voter can verify, and in the event of a dispute, a human recount based on the tape is the final word on the result.