I bet these "expired" security.txts will become more common than unexpired ones in the near future. Updating a date every year sounds annoying.