I just came across the issue of building up a SQL Server ... like domain admins and the service accounts, and that might not even be needed in our case because we rely on sql authentication ...

All SQL services were switched to integrated authentication at least 10 years ago or more. Apps run under domain creds and those are used to grant access to databases.