In reply to Mark Root-Wiley.

I agree that a standalone plugin would work for something like this and has its place. I mostly just think whether it shows for CPTs should be opt-in rather than opt-out. I'd like for core WP to tie statuses into post types at some point too.

I'd also really take this the distance. For example, no one can view or edit archived posts, not even administrators. I'd tack on a couple of custom capabilities like read_archived_posts and edit_archived_posts. Then, hook in at the appropriate points (a query-related hook for reading and map_meta_cap for editing) to check permissions.