Stefan, can't you upload a filter on the file browser that disallows the uploading of:
- state.png
- sprites.png
- pics1.png
- any of the emoticons or default Graal images
There is no reason a server should be able to overwrite these images with their own crappy stuff. So really, there should be no reason they can even be allowed to upload a file of the same name as the above files.