Presumably you have backups for both the primary database and the message queue (or maybe no backup for the later). If a disaster happens, requiring you to rest

Presumably you have backups for both the primary database and the message queue (or maybe no backup for the later). If a disaster happens, requiring you to restore backups, how confident are you that your system as a whole is behaving as expected (no events acknowledged but not processed / no events processed twice).