The issue you found came down to ONE bit in your UDT. There was a bit added and the end, and it expanded the UDT to 64 DWORDs (256 bytes, layout dword:bit offset 63:0). Since that UDT is so big, it utilizes a different path in Designer to do a different kind of status ("Bulk" status vs. "Simple" status). The Designer logic currently does not handle substructures in a bulk status request. Hence, the request ends up reading BYTEs from DWORD offset 0, not DWORD offset 52 in the parent UDT (52 is the DWORD offset wherever the timer is, 8 BYTEs - the size of a Timer).
So another workaround is to tweak your UDT to be 63 DWORDs long, not 64. I tried it by moving that one bit as a union with another bit (not a valid change for working code, but just to tweak the UDT size from 64 down to 63 DWORDs). The Timer status in Ladder and Data View worked.
So, if you have a spare bit anywhere else, you could move that one bit - but I see that you are probably not done in your definition of that UDT, so this may not be a valid workaround. There is a limit of 64 DWORDs in a structure (256 bytes), so be judicious in your structure member expansion (you may need to create a 2nd UDT).
We are going to fix that bug in the next version of Designer. It's definitely a Designer side issue - the PLC responded "properly" but with an "improper" request from Designer for that nested timer structure status.
One bit. Ha!