I agree with this.
Hand recount does indicate a pure machine at least at that point. It is of considerable concern that those machines were never attached to a network post election.
If they were, they could be reprogrammed to count fairly, vs not fairly during the initial count. Or with a thumbdrive if not networked.
One would think the machine has a record of updates stored within.
No. Check that. The recount did not differ much from the initial count. So no reprogramming happened.
The only way to fix this is an envelope audit. A few 10s of thousands of those would give the legislature cause to appoint Trump electors.