Autofocus can be for anything - Phone cameras, Surveillance cameras, Drone missile targeting systems, etc.
I know you didn't make this argument here, but I still want to point out that that's ethically irrelevant for his decision.
Or the other way around: "Someone else would have done it" is not a defense when you've built something that was clearly gonna be used for Bad Things(TM).
Indeed, there are many nefarious applications of computer vision. But applications to the medical industry are plentiful too.
I see weighing up the net benefit as a tricky and a personal matter.