You are right, but every mentioned problem can be managed.

The validation and voting process should be separated in time. For example, there is one week for validation, and after it, one week for voting.

Voters should use their own devices and an Ethereum address that is generated ad hoc. Sending an Ethereum transaction is using a gossip method, so your IP address is fully protected.