There’s security and possible support implications, and a general concept of reducing data use and storage, but I don’t see why they should take precedence for something like this.

Overall, yes, it can’t be significantly more than a few database records sitting around. The avatar image is probably more data than the rest of the account metadata.