No you don't need to track UTXO's because UTXO's are stupid. Them and blockchain are the constraint of the whole system.

The distributed ledger is all that matters. You don't need to know "who sent what". You only need to know "who owns what". That's it. The ledger. 

The logic is simple: Has key? Has balance? Send approved.