This is something that we discussed while working on libcyphal. With a non-zero transfer-ID timeout, responses may be lost if the server responds to multiple requests not in the order of their arrival. There is no risk of response duplication because the client will remove the pending request entry once its first response is received.