Why does this happen? Shouldn't the response be set by the time the load event fires? If not, where is this documented

The XMLHttpRequestUpload: load event is fired when the upload completes successfully. The full response is usually not received.

and what event is the correct event for getting the response?

You want to register a XMLHttpReques: load event. This event is fired when the whole request including the response completes successfully.