Why iOS MDM profile have expiration date?


From the Apple MDM documentation:

an MDM server can replace profiles that have expired signing certificates with new profiles that have current certificates.This includes the MDM profile itself

I noticed that we can install a new profile over the one that is expired or with an expired attached certificate. Why do they have an expiration date if it doesn’t matter?