I could be wrong, but I don't see how it can be legit. It it was a real company and not someone with a particularly productive, um...bakery...I think he/she could accept credit cards directly and not just payment through PayPal.
PayPal is cool for eBay transactions, but any legit "business" should be able to take payment directly.
I could be wrong.
The office roomies and I were leaning in that direction. We're speculating that they are either used but original disks or copies. Regardless I thought I'd throw the link out there for 'education and discussion only'.