The big take away I had from the summit 8001 discussion was that we did not want this to turn into a nerdshed over voting methods and technologies. Keep it simple.
Anyone worried about protecting their vote from prying eyes/bots before the result can aim to push their vote to GitHub near the deadline.
We decided that we’re all adults who should have a level of trust and respect for one another. If we believe we are composed significantly of assholes who will vote tactically, why be here at all?
As for GitHub committers vs everyone on python-committers ever, we figured this took care of the retired emeritus folks. Anyone who will actually be interested in the outcome has an easy option: show yourself by activating your GitHub status instead of lurking. Anyone unwilling to show that level of activity does not make sense as a decider.
We should not be writing custom software to collect votes. Using helios like software is extremely overblown - not worth it for a one time ultimately public ballot with a small pool of voters on one project with multiple good outcomes.