Trump signed an executive order today about mail in voting. It's an attempt to restrict postal delivery of mail in ballots to people on a DHS-compiled list of citizens.

Rick Hasen has a nice summary (tl;dr: not much to get worked up over here, for both legal and practical reasons):

https://electionlawblog.org/?p=155187

Breaking: President Trump Signs New Executive Order on Elections: It is Underwhelming Compared to What Was Threatened. It's Key Part is Likely Unconstitutional: Directing the Post Office to Reject Mail Ballots Except from Those on Federally Approved Voter Lists #ELB

President Trump has signed a second executive order purporting to regulate federal elections (especially mail ballots). His first executive order from last August has already been enjoined in key parts for violating the Constitution. As Judge Kollar-Kotelly wrote in one … Continue reading Breaking: President Trump Signs New Executive Order on Elections: It is Underwhelming Compared to What Was Threatened. It’s Key Part is Likely Unconstitutional: Directing the Post Office to Reject Mail Ballots Except from Those on Federally Approved Voter Lists →

Election Law Blog

The postal provisions would place requirements on the ballot RETURN envelope (with the marked ballot sent back from the voter) that it must identify the voter via a barcode for comparison with the approved list. It would apply to envelopes marked as "official election mail", which is not a marking states are required to use, though most do.

Anyway, this will be challenged in court, and the logistics of it would make it pretty infeasible prior to the midterms in any case.

One problem: there is no existing master list of US citizens and their addresses. This is why states have to have voter registration in the first place.
And the legal problems with this are too numerous to enumerate. For one, this EO requires the USPS to engage in conduct that could be construed as interfering with individuals' rights to vote, which is a criminal offense. Ballots from purported "unauthorized" voters would never be delivered, depriving the voters of the ability to ever adjudicate any questions raised about their eligibility (which might occur when their ballot is received).
Anyway, I agree with Rick Hasen that this is not cause for panic.
An aside: most mail from election offices to voters, and most pre-printed ballot return envelopes, are marked "Official Election Mail". This is a convenience, but not a requirement. The USPS takes some measures to expedite and protect election mail (they'll usually deliver it even without postage), but there is no law requiring that election offices use the marking. A state that wants to evade Trump's (rather feckless) EO could simply use regular envelopes.
Many ballots are already returned in plain envelops. The generic UOCAVA ballot, used by many military and expat overseas voters, is designed to be returned in a regular envelope. And some states allow "print-at-home" blank ballot forms for some or all voters, which are also returned by a regular, voter-supplied envelope.

It's worth trying to understand what problem this executive order is purporting to solve. It's not clear; you have to squint.

Trump and many of the election deniers have created a widespread impression that mail-in ballots are unsecured, and that there are no (or only ineffective) safeguards against sending in counterfeit, fake, or duplicated ballots and having them counted.

But, despite being repeated frequently, this impression is completely false and baseless, as I'll discuss.

Mail in ballots have security features and a processing workflow that mirror that of in-person voting. Just about every mechanism that prevents you from showing up to vote in person multiple times or without being registered has an analog - sometimes a stronger one - in mail-in ballot processing.

The precise details vary from state to state and for different voters, but roughly:

1. Marked ballots are generally returned in two nested envelopes or wrappers; the inner wrapper has no identifying information, while the outer one is unique to the voter and has both identifying information and, generally, the voter's signature. In most cases the only way to obtain a valid ballot and envelope is to have it mailed to the address on file with the local election office.

2. The voter returns (by mail, dropbox, etc) their ballot in the two envelopes and signs the outer one.

...

3. When the ballot envelope reaches the election office, it's processed in two stages:

3a) First, the outer envelope is checked to verify that it contains the unique identifying information for the voter (usually a unique ID number), that that ballot wasn't already processed, and that the signature matches what's on file. If there is any discrepancy, the ballot is held for exception processing.

3b) If the verification was OK, the inner envelope (with the ballot inside) is sent to tallying.
...

4) The inner envelopes (of accepted ballots) are opened only later, in batches after they've been separated from the outer envelopes with the identifying information. This preserves ballot secrecy. Then the opened ballots are sent to the tally machines (generally optical scanners) and retained.

This workflow has a number of important properties.

...

- First, you can only send in a ballot accompanied (on the outer envelope) by something that was sent specifically to the voter, with unique identifying information that a third party couldn't obtain (the ballot ID number). And each ballot ID can only be processed once, since it's checked off a list once it's accepted.

- Second, the submitter of the ballot has to sign the voter's signature. So we know not only that the ballot was sent to them, but have a signature to compare it with.

...

- Third, exceptions are extremely rare and would be quickly noticed. If an even moderate number of duplicate ballots or ballots with invalid ID numbers were to come it, that would be a HUGE deal (and I'm not aware of any place in the US where it's actually happened). It would rapidly trigger a major investigation, likely involving both state/local and federal authorities.

...

So in summary, mail-in ballots are secured by mechanisms and processes that replicate all the steps of the check-in process at in-person precinct polling stations, but with the ADDITIONAL safeguard that the voter needs to provide a unique document that was sent to their address for each election.

The idea that mail-in voting invites fraud is simply not supported by reality.

@mattblaze

Let me get this straight: a #Trump appointee, the Postmaster General, is in charge of delivering to each citizen a permit to vote--the bar-coded return envelope for the #ballot

No chance for shenanigans there. Expect mail delivery to be on time in rural MAGA counties. Mail delivery in Brooklyn, the Bronx, Boston, and Baltimore suffers unexplained delays.