OCSP stapling has always felt like more work than short-lived certificates. You still need to replace your certificates, but now you have a second process that

OCSP stapling has always felt like more work than short-lived certificates. You still need to replace your certificates, but now you have a second process that refreshes the staple. At that moment you might as well refresh the certificate. Then there is the issue that of stolen certificates. Imagine a key and staple is stolen, the company detects it and revokes the cert. You still have until the end of the stolen key & staple's lifetime in which they are valid, and the consumer would never know. At least with OCSP live checking that timeframe is reduced to mere seconds, at the cost of loss of privacy. With CRLs you have to pull more data, but you can at least reduce the vulnerable time to seconds, without privacy implications.