why is critical infrastructure being outsourced in any capacity?

In the worst-case scenario, hackers could manipulate a state’s voter list, adding fictitious people to the rolls, changing real voters’ information or directing voters to the wrong polling places on Election Day.

Oh no! At least they are not padding the rolls with the dead!

They said they opted not to cut ties with WSD because the company was transparent after they confronted it, and the scan revealed no signs that the system had been tampered with.
“There was nothing alarming that we saw that would cause any red flag for us,” Lang said.

Zero consequences.

they knew that the smallest glitch in Election Day technology could become fodder for conspiracy theorists

The firm had offshored part of the work

A programmer had hard-coded the Ukrainian national anthem into the database

This was “a disaster averted,” said the person familiar with the probe, citing the risk that hackers could have exploited the first two issues to surreptitiously edit the state’s voter rolls, or use them and the presence of the Ukrainian national anthem to stoke election conspiracies.

Golly, I sure am glad to hear it's all just a conspiracy theory and not conspiracy fact. Someone might have gotten the wrong idea...

There is little oversight of the supply chain that produces crucial election software, leaving financially strapped state and county offices to do the best they can with scant resources and expertise.

I bet soon enough it will have the best fortifications "guardrails" they can create for it.

The revelation prompted the state to take a precaution that is rare among election officials: It hired a forensic firm to scour the technology for signs that hackers had hidden malware deep inside the coding supply chain.

That should be standard and required everywhere but we all know why they don't do it...

What, Russia wasn't sanctioned enough? Sounds like the Big GAE need to sanction them even harder.