Removing the candidate list seems like an dangerous complication to the system. The system can verify that a ballot was collected, but there is no possibility to correct a ballot that was miscounted.
Once removed, voters cannot verify for themselves who they marked their ballot for. On the counting side, it allows for fraud simply by changing the correspondences.
Also, if someone cracks the servers, they could replace or delete every ballot in the country, causing detectable but widespread chaos as every ballot would have to be rescanned.