Profiles decides whether users may have a profile picture, and what happens to the ones they upload.

A profile picture is the one upload that is meant to be public, since it is shown next to every post its owner writes. The public-storage warning that matters for attachments doesn't apply in the same way here.
Picture conversion needs ImageMagick on the machine the board runs on, and that is the one runtime dependency the binary has.
Readers who would rather not see any of this can switch profile pictures off for their own account under View, which changes nothing for anyone else.
The page itself: Administration → Board Settings → Profiles