Previously before the template was migrated the backup of the recovery key was covered under 'Require device to back up recovery information to Azure AD';
Since the migration this setting now shows as 'Save BitLocker recovery information to AD DS for operating system drives';
Regardless of the wording in the UI, the recovery key is being backed up to Entra as expected for both Entra Joined (MM) and Hybrid joined (CM) managed devices