I loving love how the god damn solution to every exploit problem isn't to "fix it", It's to remove the loving feature.
Glad to see this is a fix.
I would assume that this isn't intended to be a permanent solution, rather to be as a substitute so that people don't exploit the SMF avatar function.
You need to calm your stuff, dude