Depending on how session timeout is processed, server-side, a end-of-session trigger might not need polling. For example, if you’ve stored an object in the session cache, and the object has a __del__ method, does that method get called? (But maybe we can’t store such objects in the cache…)
Even if it does need polling, it only needs it for those Sessions which have specifically asked for such a trigger.