I don't think it is correct to say that cloudfront will only ever go to the origin server once. Just think what kind of storage requirements they would need to have if every max-age'd resource was kept around forever. In reality, they only have so much space, so only very hot and active content will stay on their servers indefinitely. Less active content will fall off eventually and need to be retrieved from the origin again.
Comment
I don't think it is correct to say that cloudfront will only ever go to the origin server once. Just think what kind of storage requirements they would need to have if every max-age'd resource was kept around forever. In reality, they only have so much space, so only very hot and active content will stay on their servers indefinitely. Less active content will fall off eventually and need to be retrieved from the origin again.
Replies
If that's the case, that CF leaks, then it'll miniscule amount of traffic. However, I guess it means you simply can't remove the origin resource.