What does defaultTokenDuration affect besides hidden entries' share links?
Currently (as of Craft 3.0), it will affect entry and category share links.  Some additional things might be using it in the upcoming 3.1 and plugins are free to use it for whatever they want.

For example, in Commerce 2, it is used for creating product preview share links.