It's a non issue if you use admin@yourdomain.ca instead of whatever your admin guy decides.
Make sure admin email defaults to someone who has company ownership and never give an it guy access to that email.
Yes, access should be separated where possible. The person managing DNS may not need full control over ownership, transfers, billing, or account recovery.
Sponsors who contribute to keep dn.ca free for everyone.