We have set avatar file size to 100 kb, the permission field requires bytes. It's not an issue to manually convert the value from kilobytes to bytes, but I noticed 102400 bytes does not visually fit the text field (see screenshot below). Therefore I wonder: why is the field not requiring a value in kilobytes? Who uses avatars with a size less than 1 kilobyte anyway?
This is more likely down to OS rendering choices. That said, we do actually have size=5 set on all numeric permission inputs. This is something that applies to all of them though; setting something to 6+ digits is an outlier generally.
Interestingly, there isn't a spec for what size=X means explicitly. It's sort of ambiguous when you think about. In a variable width font, is it X W's? M's? I's? There is definite room for interpretation there.