Absolutely everyone can burn off tokens he held. A third party can burn tokens from other addresses only following an approval. Nobody, not even the Token Owner, should be able to burn tokens from other addresses with out approval. On this case I needed a personalized address containing my identify, https://hilaireb074osv5.wikidank.com/user