Went ahead and clicked the link, brought me to what looks like a legit site...of course I didn’t actually reset my password.
Closed the screen out and then hit the link again and it says it’s now an expired link.
I’m beginning to think it actually is legit....I’m going to log into it myself not through the link and go ahead and reset it. Though there isn’t much they can do, I’m not paying for Disney plus, I got it free through Verizon so there is no payment info in Disney‘s account.