We can session timeout as long as we like. But the problem is the sesssion is on the server's memory. Even if the browse is closed, the session is still there until the timeout comes. So if session timeout is long, there will be many sessions stay on server's memory. Therefore, the performance of website will be greatly affected, especially when there are amount of users.