It is also necessary to prevent deleting after registration. filter_profile() is best. However, because unfortunately this function supports only expansion item, avatar is not checked. You add flag to user table in the same way as email confirmation. If you do it, you may prevent access of users that don't register avatar.