Decades of concern with election security have so far led to scandalously few reforms of our voting procedures. Many Americans are no longer confident that vote totals this coming November will be accurate or, more fundamentally, will reflect the preferences of citizens among whom “voter suppression” is a reawakened worry. States remain firmly in control of election administration, and states vary widely in timing votes, deciding where votes can be cast, permitting votes to be cast early or other than in-person, handling votes cast overseas or in advance, recording votes, counting votes, and reporting votes. And states also vary widely — and frighteningly — in their attitudes toward cyber attacks by foreign intelligence organizations, by digital criminals, and by thrill-seeking Internet trolls. Deterring such attacks is difficult, and retaliating against them is dicey. Our 2016 experience and our ongoing observations show many states, Maryland fortunately an exception, either uninterested in election security or ineffective at mitigating the dangers they do expect to face. Familiar risks — storms, earthquakes, fires, riots, fraud — have strained past votes, and our new cyber risk, most dangerous where least feared, will surely strain the coming vote, but no stress prior to our current coronavirus pandemic has created, in every state simultaneously, a conflict between exercising the electoral franchise and staying healthy. Directly ahead in COVID-19’s policy-forcing path and already immunocompromised by pre-existing conditions, lies ELECTION-20.