If privacy is a concern with gravatars, why not ask Automattic to add to their privacy policy? The Automattic privacy policy applies generally to a number of their sites and services, but it would be possible to exclude Gravatar data from advertising and tracking (if that is the concern).