That could be the case but my understanding a little bit different.

The configuration file is read by mongod, not by systemctl. The process mongod is started as the User specified in the service file, so only this user needs to have read access to the file.

But I will test your sudo theory once I am on my linux machine.