Handling of avatar images in public S3 repos

We can't provide legal advice here - you must seek your own legal counsel to determine what works for you and your users in your jurisdiction.

As far as storing images in S3: Absolutely. I'd also add CloudFront as caching layer.

The question is: Do you need to restrict access to the images? If so, Lambda@Edge or CloudFront Functions might be appropriate.