I find it hard to believe that Twitter doesn't have some method of adding additional security to high-profile accounts; and that they would not necessarily publish it.

For all we know, that could be a honeypot setting, with the additional layer of security not visible outside of Twitter's internal authentication mechanism.