My mom works part time at a library in archives, where her personal work email is also the general archives email (ie LibraryNameArchives @ email . com). She has an out of office response that replies with her work hours (since she’s the only employee in the archives) so people know when she’s in the library and can respond or when they can come in and visit her. The only frustrating thing is that her email either isn’t capable of, or she doesn’t know how to, turn off the OOO email when she’s actually in the office, or doesn’t trust that she’ll remember to turn it back on. She’ll send me an email about something, I’ll respond, I’ll get an OOO response, she’ll respond, I’ll reply, I get an OOO reply, etc etc.
There are some types of work or office cultures where I think this makes sense. Sometimes enough people use OOO messages for work travel, conferences, and similar that getting the OOO doesn’t really mean you won’t get a response until the date specified. It can help to clarify.

But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.
“The world is serious enough as it is - people need, and usually appreciate, an unexpected moment of levity in their day,” he says, when quizzed about how recipients might respond to such an OOO. He also confides that he himself has dispensed with auto responses altogether – though not for idealistic reasons. “The last time I tried to set one up, I botched it so badly that somehow it resent every single email in my outbox from the previous year - client emails, firing notices, literally thousands of emails.”