A security exception with no expiry date can become a permanent control decision nobody deliberately made

An exception granted for six weeks, with no date attached, is a permanent change to your security posture.

Nobody decided that. The original reason passed, the people moved on, and the exception remained because nothing ever prompted a review. An expiry date is the entire mechanism that keeps a temporary decision temporary, and omitting it converts a pragmatic accommodation into an unexamined standard.