I think a clarification is needed here:
Resharing changes the shares, not the secret. In SSV’s DKG, resharing regenerates new shares of the same validator key. If ≥ t former operators kept their old shares, they can still reconstruct the key. “Old shares are thrown away” is an operational assumption, not a cryptographic guarantee. To fully revoke past operators you’d need a key rotation (new validator).