Cache duration far less than cache-control max-age directive

We have Cloudflare Cache Rules set up on our domain that rely on the cache-control directives provided by our origin. This is working fine as Cloudflare often returns the CF-Cache-Status HIT header after initial cache misses.

With that being, even on a Business Plan, Cloudflare is not coming anywhere close to honoring the duration specified by the cache-control max-age directive. For example, if max-age is set to 31536000 (e.g., 1 year), cached assets are often being invalidated in less than 10 minutes. I know Cloudflare is a pull-based CDN and won’t cache assets for that long, but invalidation after only 10 minutes is quite shocking.

Are we doing something wrong here or is this expected behavior?