fundamentals of software architecture pub-sub vs queue in a bidding system

On page 33 of "fundamentals of software architecture", in the "analyze trade-offs" section, it says:
In analyzing the differences, notice first in Figure 2-8 that with a topic, any‐
one can access bidding data, which introduces a possible issue with data access and
data security. In the queue model illustrated in Figure 2-9, the data sent to the queue
can only be accessed by the specific consumer receiving that message. If a rogue ser‐
vice did listen in on a queue, those bids would not be received by the corresponding
service, and a notification would immediately be sent about the loss of data (and
hence a possible security breach). In other words, it is very easy to wiretap into a
topic, but not a queue.

My question is:

How can you detect that the bids were not received by the corresponding service so you can send a notification about the data loss/security breach?

Perhaps intended services have a secret key that the rogue service doesn't have? So once an item is popped but not acknowledged with the right hash we will know that the item was taken by an unauthorized service?