I have to admit the latest SP seems to have solved the random unknown status issue and the issue I had where apps would always go to unknown before they went to warning or critical.
But I for one think the unknown status is just confusing. I do not see a reason for it. If you cannot scan a resource it should just be marked down like in NPM more or less and go to warning or critical as in most cases this would be the reason for the issue anyway. Having this extra layer only seems to confuse my users and the people we send alerts too.
Just my 2 cents on the issue.