> wouldn't they be setting the expiry value in the SOA record themselves?

If they thought about it. But it is something that even people relatively experienced in DNS matters forget about until it bites them and they've spent ages diagnosing the initially odd looking problems caused.