First of all, thank you for the effort you put into your software.
It would be a cool data protection feature if Vikunja could get a user’s avatar picture from a self-hosted libravatar instance. Vikunja could also accept a “picture” URL from an Oauth provider. I think the latter would be a more universal solution.