The McDonalds app lets you place an order, but you have to check-in (via the app) when you arrive to pick it up. They don't start preparing anything until you do that; you can cancel, change stores, adjust order, etc. up until the "I'm here" button is hit.
Agree with you that this seems actively malicious, and because of the dollar amounts involved, is liable to get him in big trouble.