I should have scrutinized the email more thoroughly, but given all the issues Ledger has had in recent years, I totally fell for it.  It did indeed turn out to be a fake, phishing email with a malicious link (that I didn't click,) of course.

The email looks totally legit.  Be vigilant out there, folks.