Of course, it is important to know if the app is really written by BoA or a 3rd party. If the latter is the case, use the website.
Most likely, an account is going to be hacked on your end so be careful of that. Exercise best practices like never give out information to anyone but BoA. Nowadays, scammers will call under the guise of a BoA rep. Scammers will send out emails pretending to be BoA reps.
App or website doesn’t matter that much. Du diligence on your part is the key to security in general.