I think the much more important reason for expiring certificates is to minimize the damage in the case that your private keys are stolen, which is far more like

I think the much more important reason for expiring certificates is to minimize the damage in the case that your private keys are stolen, which is far more likely than them being brute forced.