You should read Microburst toolkit - it is an open-source tool. Find Get-AZStorageKeysREST.ps1 it tries to enumerate all storage accounts then the respective storage keys. There is nothing to do with anonymous access here. Even if a storage account allows public access you can't get the key without being authenticated and authorized.
The preventive control here is to manage Shared Key Authorization.