Hi Andrew,
I have looked into this and the device seems to respond properly. I just send an I2C address of the non-existing device and read the I2CStat, I read 0xF1 which is I2C_NACK_ON_ADRRESS.
If you wait for a little then read back I2CStat register, would it still be 0xF2? Can you try to run the same test right after power up without doing anything before the test, would you still read 0xF2? What is the UART sequence you did send?
Best regards,
Tomas