There is actually another possibility: there must be a way to check whether the receiving system has received the message. But this only works if there are no "rogue" senders.