How do you use the Avatar feature?

[sduensin]

How do you properly configure the user avatars? I created an "Avatar" file field in the user table and configured the theme to use it. Then I created a view to allow uploading the avatar from the user settings menu. However...

1. All avatars need unique filenames. For now, I've made the field unique and set an error message. No ideal.
2. Images are not resized. I uploaded a 150x150 image and can only see a tiny portion of the upper left corner.
3. Users do not have access to modify the user table. Is it remotely safe to allow them to own their own record?

Am I making this too complicated?

Thanks.