Hi. The current version of the FP2 OS (19.05.3) only has the Android monthly security updates up until March 2019. Before that update I believe it was December 2018. Shouldn’t we get security patches delivered a bit more frequently?
Google has decided to include hardware vendor’s patches into their monthly patch levels as well. On other OSes those are often separate, so they get less attention.
The underlying problem exists on computers as well: drivers are closed source and vendors can decide any moment to stop updating them. On Windows, you won’t notice that unless you upgrade your OS from Windows 7 to Windows 10 (for example); you can continue to run drivers that are years old on Windows 7 just because 7 has been around since 2009 and is still supported at the moment.
On Linux it is less bad indeed as you do get kernel updates, but there you also have to deal with closed drivers for graphics/wifi at times.
LOS does not include vendor patches (those from Qualcomm)
vendor patches may only be included in updates to Fairphone (Open) OS (the community provides a modem.zip that can be flashed for LOS; this modem.zip would include the vendor patches)
not every FP(O)OS Update includes vendor patches
Qualcomm has stopped support for the Snapdragon 801 so there won’t be any vendor patches anymore for the FP2