I would think that a disconnect would be required to protect the secondary conductors.
240-21(c)(1) seems to indicate that the secondary conductors are not protected by the primary OCPD, and I am not sure that I would like unprotected conductors running 3 floor til they get to the mail in the load center.
