In my case, BPI is our company's payroll account (the other is BDO).
It is an ATM account(current), yes, but I never used it. I only transact through the bpiexpressonline.
I have another ATM account (savings) that I use as my "scratch pad",- meaning I transfer limited amount of money on it for my emergency/foreseeable requirements. So, I am limiting my exposure to any ATM-related fraud/issue.
It's a totally different story though if the bpiexpressonline is compromised....