Securing voting machines should have, although probably could not due to needing court orders, happened immediately after the election. Too many ways to corrupt them after the fact.
Which brings to mind a thought that all voting machines should be impounded after an election and investigated- not by county or state IT personnel but by people who are experts in that kind of thing.