I'm going to take a different tack. No they do not last forever. When they are exposed to a surge condition they do fail. You want them to fail, rather than the device they are intended to protect. WHEN they fail, you'll know it. The magic smoke gets released, and downstream devices lose power.
For optimum effectiveness, TVSS needs to be implemented in a layered architecture.