You need a second factor (physical access to a device already in the circle) to add a device to the iCloud Keychain. Edit: I see you are worried about devices

You need a second factor (physical access to a device already in the circle) to add a device to the iCloud Keychain. Edit: I see you are worried about devices already linked