That's why short lived certs are better then just private keys - even if the key is stolen, the system can cut off the access by not issuing the renewed certifi

That's why short lived certs are better then just private keys - even if the key is stolen, the system can cut off the access by not issuing the renewed certificate. This makes private key itself to be irrelevant, in fact it can be generated as well once a day for example.