Owner or developer from the project team can burn tokens from Anyone’s EOA by providing an access.
It can do this in the way that after the users bought token, Owner burns all their tokens to pump the token price, and in the final stage drains Pools.
Always carefully examined before investing and buying token, and even if the project has already been Audit, this re-examination should not be ignored.