That's very true for a lot of PKI systems too. The revocation lists are published, but nobody is reading them.

At least they exist. I've tried looking into this in the past, and I haven't really found any public passport revocation list, even of just numbers (i.e. without disclosing associated names or any other sensitive data).