Avoid using the App for security if you don't really do that much transactions. In my case, transactions to 3rd party accounts are blocked. You can request BPI to block 3rd party transactions.
Just don't activate the transfer to anyone feature,
3rd party accounts are pre-registered so basically you know whom the accounts belong to...usually it's family members.