An activist campaigning against voter fraud in Wisconsin ordered mail-in ballots for other people, found it was easy to do, then went public.

It would be wrong to file charges against the activist. He did not try to vote using those ballots. But what should the state do instead?

In effect, he tried to demonstrate that the state doesn't have much security against this sort of fraud. Apparently that is true. Is that a real problem?

If people actually use this "security hole" for fraud, I think it is a real problem and the state should fix it.

On the other hand, if nobody really does this, maybe the system is not really broken and there is no need to fix it.