best way to update packages on stable

[mk]

Hello list,

I have several packages which are exposed to internet installed on my 
OpenBSD 4.2 server.
Unfortunately some of them are quite old and contain security bugs so I 
would like to update them.

I was watching quite a big fight on MISC OpenBSD list recently so I know 
that updates are not released for stable version
anymore and it is necessary to follow current and build everything from 
ports if you want updated software.

Should I switch to current? .... because it seems in current are sometimes 
big changes, is current ok for production system?
How do you solve this issue? Do you run current, or compile applications 
directly from source?
Or is there any other possibility?

Thank you
MK