Yes, two-step verification should still be used in addition to Yubikey/Google Authenticator.