I recommend adding as many of your devices as trusted devices as well as other phone numbers in case you need to recover the account. Apple can not really assist in that when Two Factor is enabled.
Devices are automatically trusted the first time you login and enter a verification code.
When anyone tries to login to your account on the web or from an untrusted device, all of your trusted devices notify you with location of the login attempt. It's a pretty good setup.