You can always stick with the release binaries, which are unchanged.. or follow -current development by periodically upgrading to snapshots, where you can find more up-to-date binary packages. This is what developers run on their laptops, and often in production. It's sort of a "rolling release".

There aren't enough resources or interested developers willing to handle -stable package builds, but the ports tree is tagged each release and receives select backported security updates, which you can build yourself.