I don't know about the US, but mail-in voting should be no different from voting in person (in person verification being the only difference). It must highly traceable in that a registered, actual person can cast only a single vote. Unless tampering happens during vote counting, there is the same keeping of records / audit possibilities.