Coolio, but I've gotten myself into portupgrade hell several times. It wants to rebuild everything for every port. :-( I think on a machine that you run it consistently on and follow through with, everything should be copacetic.
Thanks for the tips though. I have a machine that is fairly clean now, so it should be doable.
the better choice is to update all ports for a nice system, (and if you are concern about security just install portaudit),, but you can FORCE for only update what you want.
#portupgrade -f PORTNAME
but COOLIEST :D is to have a jail to build packages and then deploy to other machines