A mask path or shape layer path must have values stored somewhere of the postiton of the vertices. So where are they, and how can refer to the coodinates in an expression?
You simply can't. They are stored as compound properties in singular keyftames. Scripts can access them, but not expressions. If you need to drive masks parametrically, scripts liek Tracker2Mask and similar are your only option.
Retrieving data ...