This appears to be available on the website and the app.
Profile > Security Profile
It doesn’t call it ACATS, it calls it “Outgoing transfer lock”. You can pick which vanguard accounts, too, if you have multiple account.
It also says a “Full Transfer Lock” is “Coming Soon”, that will apparently cover ACH transfers in/out, too.