Revoking has an actual cost itself for them too (and for all client, in the end) due to the revocation list growing. Revocation isn't part of the normal lifecy

Revoking has an actual cost itself for them too (and for all client, in the end) due to the revocation list growing. Revocation isn't part of the normal lifecyle of TLS certificates either: you'll only need this once you've had a security breach.