If you add a security key for additional two-factor authentication protection, Twitter no longer require using another backup method for more protection. Security keys can be used as your sole authentication method, without any other methods turned on.