Yes, if you want Google's device protection, you need to buy the phone from the Google Device Store.
And, unlike before (when I purchased my Nexus 6P), you no longer have 30 days (or, was it 15?) after purchase to add device protection. You must buy it at the same time as you buy the phone or you are out of luck.