Re: Why is this so hard?
The point of sealing the machine in a tamper-proof box isn't to prevent people accessing it - it's so you *know* that someone did. It's no different from sealing a traditional ballot box - anyone *could* open it but not without you knowing about it.
As for the paper receipts -
One copy retained in a separately sealed compartment - that allows for a cross-check of the machine's count against the physical count (so you can determine if someone's tampered with the result after it's been read)
One copy to the voter so they can see that the vote they cast is the vote that was recorded (so nobody can program the machine to show one thing and record another)