But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.
No one thinks much about cybersecurity while traveling. However, email security company Tessian warns the out of office message actually plays right into the hands of threat actors and cybercriminals. It’s a social engineering attack vector that no one thinks about. The out of office message is ubiquitous and handy. But if it includes any personal information at all — such as attending a funeral or going out of the country — attackers have all the information they need to impersonate the person who is out of the office, without the attacker having to do any real work.

Or provide one of those downloadable calendar reminders in the OOO response that says “X is back from leave; okay to email!” Then at least you’re being helpful and proactive while you’re deleting everyone’s email.
I think important context here is that no matter what the details added were, it always had this aggressive tone of “I’m taking a break and breaks are IMPORTANT”. Which I agree with, but it felt like it was almost aggressive/accusatory, and more importantly: this person was without a doubt the meanest, cruelest, least understanding and empathetic person I’ve ever worked with who ran her staff into the ground with urgent demands and expectations.