2 ms·

Tested this theory against my account using another throwaway one. My real account has several profile pictures and the exploit didn't work.