Certain features are disabled on GitLab.com in order to prevent abuse, are difficult to scale or just make no sense. In the case of the Project Access Tokens, the feature is quite new and it is to prevent abuse. See also the (nephew/niece?) comment I made in the thread (one to the side from yours, one down)
Different features at different levels between self-hosted and gitlab.com seem counterproductive in that regard.