Correct.
You make the subscription using token foo
When token foo expires, the subscription dies with it.
So you have to remake the subscription every 3 1/2 hours (or so) as apposed to every 10 days.
EventSub solves this issue (as it uses app access tokens and does the security check another way), but as discussed in our other thread, lacks the subscription notification data we need.