Just to add some information: Fairphone said that the FP2 will not get another version upgrade, so Android 9 will be the last official Android version.
As far as I remember they did not really say anything about how long they will provide security updates. But I guess there will be security updates as long as Google will provide them. This should be until September 2022, then Android 9 will be EOL (according to several online sources).
Current patch level is 05. of June 2021 and was provided OTA. July patches have been skipped until now (same as in the FP3). I hope that both the FP2 and FP3 will get the August patches quickly, as they fix some major security issues in the media framework.