Admins can (I believe) see all votes, full stop

This is correct, with the caveat that the votes must have federated with the admin’s instance (so other instances need a user to be subscribed to the community in question, and votes can take time to flow through).