Clients should refuse to fetch profile pics that weight more than... 50Kb?

And of course if they allow to upload them, a sensible resize is needed.