Best practices for admin accounts with multiple integrations

I have a question about what is considered to be “best practice” for the use of service accounts connecting to integrations.  Our company is starting to request more external application integrations with DocuSign.  The few are connected currently each have their own service account created and given an exception to bypass SSO with admin privileges. I see this becoming more of a burden since accounts require an email address and a mailbox must be configured to receive external mail for verification of any edits to that DS account registered to the email address.

On the flip side, I also feel that it is less secure to have 1 service account for connecting all integrations.

How is this being managed elsewhere?  Thanks for any feedback!