I believe the following security advisory applies to anyone interested in starting to use GPG + Yubikey:

https://www.yubico.com/support/security-advisories/ysa-2017-...

Seems the recommendation is to ensure you generate GPG private keys off the YubiKey (if you have an affected device).