Currently only delegated user permissions are supported, and this is very sub-optimal for bots and service applications that need to monitor Teams presence of users.
I'll be totally cynical and assert that MS is blocking app read-access because they don't want anything competing with MSTeams - deliberately driving people that their app is the only choice for such data.
I believe they are blocking the 'status message' for the same reason
They are such obvious use-cases it much be deliberate