To block a bot, you can either block IPs or user agents. If the bot uses a different IP or user agent, it slips through. I don't know about MOZ, but everybody offering a paid tools wants to offer reliable data. I wouldn't be surprised if some of these tools crawl again "incognito", disguised as some user, if they discover that they are blocked.