Most of the proposals I have heard allow the voter to check and approve the receipt, but then it gets put in a locked box at the site. This would answer both of your objections.
Moreover, there are some clever proposals for creating bar codes and timestamps that authenticate the individual ballot receipts, preventing ballot box stuffing, while preserving anonymity.
I think it's a good idea, as I trust Republican politicians only marginally more than I trust the Dems.
-ccm
I'm with you there. When you have politicians designing a new voting system, you just know that both sides are going to try to build in things that can be exploited later. Everything they do must be examined very carefully. The usual well, that sounds OK, I guess standard will not be enough here.