230.70(A)(1) only requires that the disconnect LOCATION be readilly accessible. Where accessible to the public it is logical to lock the disconnect to avoid vandalism. Most commercial buildings have the service equipment in a locked room. Nothing wrong with that. 230.92 recognizes that the service disconect may be locked.
