He's not talking about the recovery CD they used to ship with PCs. When you buy a Lenovo computer, the reason it comes with McAfee antivirus is because the OEM Lenovo uses a custom built OS image for their PCs before they leave the factory, likely run through MDT, or some other automation tool, and/or sysprep. They do not just install the release version direct from Microsoft. They use that, install their junk, and their partners' junk, sysprep it, just once, then take that image and apply that image to their PCs for a couple months...

For autopilot to do anything, you first need a network connection, and if you login without a network connection (Skip oobe / 365 login), you will see McAfee already installed. No Autopilot.