We will email a link that authorizes registering one new security key. The link does not sign you in: you sign in afterwards, with the key.
A code authorizes registering one new key, or changing your enrollment or recovery email. It never signs you in, and it is used up.