For the sake of understanding the problem, any avatar marked as public can, or at least could (I can't say I've looked into this problem recently) be obtained i

For the sake of understanding the problem, any avatar marked as public can, or at least could (I can't say I've looked into this problem recently) be obtained in the following manner (DON'T do this, as it's still both a violation of the TOS and copyright infringement): - Change into the avatar. - Ask the VRChat API (backend) for information on yourself (this requires no special permissions). - Use the link contained in the response JSON to download the avatar to your computer (it's how the official client obtains it, too) - Unpack it with literally any Unity asset pack extractor, of which there are several. The asset pack is not secured in any way. Note how mods are conspicuously absent from all of these steps. I'm an avatar maker myself, and at this point my stance is that I can't be responsible for people stealing assets from me that I'm not allowed to redistribute, but I'm open to directly giving anyone anything I'm allowed to redistribute, and to teach them how to implement, download or purchase everything else. It's a load off my mind.