That’s true. They are allowed.
I use Google Search console and analytics as well as Microsoft Clarity and Bing Webmaster tools and they work just fine. A sneaky way to bypass this is a custom domain and Cloudflare A Full Guide To Cloudflare. Best part is it works most of the time and with different crawlers and http agents, like curl.