Unfortunately many people don't know the real importance of their private keys, when someone from the wallet company tell them to surrender their keys they listen, I don't know what to say than let them feel the pain, they will understand better next time.

If you bought your hardware wallet from ledger it doesn't mean you can share your private keys with ledger, remember that the screenshot OP shared stated that the email was legit but comes with phishing link? Thats it.

A stupid person will probably think that, since it comes from ledger official email address then its genuine, what if its an inside job or an hijacked email account? You have no business with the hardware wallet company anymore after purchase.

No one have the right to ask for your private key, its called private because it should be yours only.