You required rejoin/reboot vcsa after upgrade
When upgrading the existing settings are preserved.
It is normal to authenticate with users of an active directory. In this type of authentication we always know who is logged in.
Welcome to the Community,
with an upgrade, the newly deployed vCSA will assume the old one's complete identity, including AD credentials.
I've upgraded several environments so far, and never ran into issues with the AD authentication.