Setup and hold times have nothing to do with the change detection. Those values are only applicable to the shift register correctly sampling the bits.
By the time you get into the NSSR interrupt, reading the port is too late. SPI will detect the change, but by the time you are in the handler, it already would be back.
If NSSR flag is set, then SPI sees the transition, the handler code is just too slow to react.