I don't see that the committee has found anything to motivate further security measures or specific recommendations. If they had it would have made headlines.

I think they went looking to scapegoat without regard to how vulnerable the vote counting system was and still is. They were not looking for how undue influences, either foreign or domestic, operate to disadvantage voters, or to spread propaganda, or to inject money into the process, or how they operate to cull, massage or manipulate the voting process itself. They certainly did not look in depth at the behavior and political persuasion of those who own the companies which produce and service voting equipment of all classes during and prior to 2016 and 2018. Nor did they investigate how information regarding systems and software found its way to Russian programmers. If they had we would have headlines of another sort.