Ah, so good to actually be able to put my faceless helmet upon my posts.
Anyway, with the ability to link avatars from outside URLs gone, it's ended the thread of malicious outside code. Avatar pics can't execute any malicious code from their home site when they're hosted here, since they have no connection to their home site any more.
As a positive side-effect, uploading and hosting your avatar here prevents accusations of bandwidth theft.