I use spotifyd and control the music from my phone most of the time.
I mostly don't care if I have the latest version of libfoo, but I do care that I have the latest version of anything exposed to the internet (eg, firefox), and any security updates required to libfoo.
What I hate is when I do a pkg update; pkg upgrade firefox and it pulls in 1000+ pkg updates via dependency chains, some of which change how things work. That's why I like the linux jail approach. Back in the old days (early/mid 2000s) when things were simpler, I still ran linux web browsers for the same reason. I could just download the tarball from mozilla or opera or whatever and update to the latest browser binary without taking a chance on fubar'ing my system.
For Spotify I use spotify-qt which is ok (not great) though with the latest version from ports it refuses to store my password in the KDE keychain any longer :(