It's not clear how much choice the users have to freely customize their theme. In use the choice is made by the user editing their account settings. The user can select between the themes the administrator has defined in the Drupal installation. It seems then that the users cannot upload their own theme, but then that capability if it existed would be a serious security hole.
