We disable "Upload an avatar" for new members/Registered User Group.
This was working as expected on XF 1.5,
but on XF 2.1, If a person register via Social Network it auto grabs the profile picture an used as Avatar even though they don't have permission to use it.