Defaulting to discourse.org CDN for avatars is a privacy and security risk

[codinghorror (Jeff Atwood)]

Sure, just flip the site setting switch, and you have 100% local avatars like before. Not sure what all the fearmongering is about.