

Security, a malicious individual could mitm or impersonate another server when the private key is leaked. Reducing the timespan from the current 398 days reduces the amount of time compromised certificates can be used. It is possible to revoke certificates, but I think this is for cases when devices are unable to receive those messages.
Yes, energy drinks shouldn’t be sold to children. An age limit that prevents selling to people below 16 seems like a good idea to me.