They expand the voter registration rolls with bogus registrations, then mail em all ballots and retrieve them.
Yes. And they change the zip code on people who don’t vote so they are undeliverable, they retrieve them and vote the ballots and then correct the zip codes so the scam is hard to detect. Logging of voter roll changes would catch this kind of fraud, but implementing it would be fought like crazy.