Antivirus products typically need kernel-level access to operate fully.
Once you get the kernel, you have raw insights into nearly every executable activity of an entire machine.
Antivirus products are a great way to deliver an intentional weakness in a patch update for third parties to later utilize to get incredible access to any number of machines throughout the world.
I'd be very concerned about what McCafee knew about such arrangements if I were the Biden administration.
You can check out further analysis about topics like this over at the newsletter