I've used these. I think it's a good idea, not to have pictures of the users. In my experience, we tended to use stock photos, and the pictures could bias the work.
Of course, now you have thispersondoesnotexist.com. I just used that, to populate a test DB with 10,000 fake personas.