You have a "secondary" DNS server assigned, and this is likely allowing some of the DNS traffic to go to a DNS server other than Pi-hole. When clients have multiple DNS servers, they are free to use whichever they choose.
Read the manual for your router for descriptions of the other three options you noted.