- Does substitution support also editing?

Yes, example as follows.

[cb:userfield field="avatar" output="htmledit" reason="edit" /]

- If it does can, it get the privacy configuration of different tabs?

Possibly if you use a tab substitution. Example as follows.

[cb:usertab tab="11" output="htmledit" reason="edit" /]

disables the JS that shows the upload field?

Can you be more specific? The JS should still work as it's prepared with the HTML of the field. It might need the same structure as a normal field though such as having a format of div or table (see tutorials within my signature regarding substitution usage).

Does it make sense to swap the edit-profile into an ordinary J! article? Display everything with CB Content Bot. But what about the submission (form action)?

I suppose you could try that as long as you construct the hidden values of the form properly. The issue being is you don't have access to the anti-spam functions that generates anti-spam hidden inputs. So this probably won't work.

1. Fields hide also on userlists (tested with avatar)and there is no option yet to disregard userlists.

Latest release of CB Conditional lets you select where it adjusts display. Simply set Profile View to Disabled and Profile Edit to Enabled. This way it only conditions the profile edit display of the fields.