As user "John Abbe Too" (no special permissions) I can edit but not add the +picture card on my User card, despite permissions showing both +create and +update as "Anyone Signed In"
When I try to create it, I get:
Ooo. Sorry, but...
You need permission to read this card: John Abbe Too+picture.
(Same error as on trouble with deleting and recreating card.)