Company cited ‘security risks’ from Chinese-owned viral video app in earlier directive to employees