Personally, I just download and install every update when prompted. But then again it makes sense to only update the programs that you use.
I'm pretty sure your mac won't be vulnerable if you don't update software you don't use, unlike windoze. it's just added space on the hard drive.