If you're really concerned, give it a long, one-time password that you don't write down. Randomly bang on 20 keys to get it.

Don't rename it or delete it. You'll get into trouble later. If you can go to Windows auth only, still set a strong password for SA. Never know when someone will change it back.