Anyone can burn tokens he held. A 3rd party can burn up tokens from other addresses only after an approval. No person, not even the Token Proprietor, will be able to burn off tokens from other addresses with out acceptance. In this case I preferred a personalized address made up https://jonahm305omi8.wikikarts.com/user