A retired small town newspaper guy once told me about the first time the publisher went on vacation and left him in charge (this would have been in the 80s). The publisher told him “Don’t call me unless the building burns down, and even then, don’t call me until the fire is out.” Good example of management setting vacation expectations.
But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.

It’s my favorite time of year, which means I’m currently out of the office lounging on a Carribean beach, sipping on mojitos, and attempting to achieve the tan I’ve been waiting all year long for.
This is true! The nuclear option also helps the recently returned vacationer understand what is a priority and what isn’t. But, as boyd wrote, “if you just turn off your email with no warning, you're bound to piss off your friends, family, colleagues, and clients.” The blog post offers some helpful steps to make a clean break feasible — they include communicating with colleagues about the sabbatical long in advance, managing expectations of those who rely on you, creating a backdoor for true emergencies, and then, right before going away, reminding everyone about the sabbatical once again.