This is entirely irrelevant. The problem is that anybody can make a Microsoft Form and there's no obvious indication that it's a form from Github without digging around.
I also heavily doubt its a joke. Shipping a thousand CDs is a drop in the bucket for a company like this. The free marketing they get from this promotion more than makes up for any cost associated with doing so.