Is an email saying my account is locked legitemate

Yes, according to: Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

"If you receive a suspicious email that looks like it's supposed to be from Apple, please forward it to reportphishing@apple.com."

It is a well known scam. Apple would not sent such an email. You can report it if you like, but I am sure it has been reported many, many time. If you want to report it,

See Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams https://support.apple.com/en-us/HT204759