Currently user upgrades are limited to permissions such as editing posts, deleting posts, etc., signatures, uploading attachments, maximum number of PC recipients, user titles and larger avatars.
The avatars issue is complicated by the fact that resizing is done automatically so limiting someone to e.g. a 10KB avatar still allows them to upload a file several MB in size as when it is resized it is then below 10KB.