That sounds like she’s using an auto-responder, not an Out of Office. The primary difference, as far as I can tell, is that an auto-response will respond to every email, whereas the OOO message will only reply once per sender when it’s turned on. (Turning it off and then back on resets it)
But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.

She continues: “However, there should be a way for whoever is emailing you to have an urgent request handled, and that should be included as part of your OOO as well as being known to your work team (supervisor and colleagues). That might look like including a coworker's email on your OOO or it might simply involve setting a forwarding rule for while you're away, so that your email goes to the colleague who's covering.”
Deal www.giveagradago.com https://www.giveagradago.com/news/2020/01/top-out-of-office-message-templates-and-examples/462 · It may be preferable to say thank you in your out of office message. The start of an out of office message should include the magic 3: a greeting, a thank you, and a statement to explain your absence. 3. Date of your return: The second part of your out of office message should provide information on when you will be able to reply.