A pair of election security researchers write in a new paper that the platform, which a handful of states are using, lacks adequate security and privacy controls.