I would just not extract the profile picture in that case. It doesn't take any time to upload one, it's ok and better than asking so many permissions.