No one thinks much about cybersecurity while traveling. However, email security company Tessian warns the out of office message actually plays right into the hands of threat actors and cybercriminals. It’s a social engineering attack vector that no one thinks about. The out of office message is ubiquitous and handy. But if it includes any personal information at all — such as attending a funeral or going out of the country — attackers have all the information they need to impersonate the person who is out of the office, without the attacker having to do any real work.
I want to be clear that I don’t think OOO responders are the solution to the larger problems of worker inequality or the broad American cultural attitudes that celebrate and encourage overwork. That would be silly. The big remedies for what ails modern work will likely require workers organizing and employers recognizing and granting protections. Large companies will have to stop prioritizing shareholder at the expense of their workers. I’m aware how unlikely this feels in practice and how a thoughtful auto reply email feels like applying a band-aid on a gunshot wound. I get it.

Consider also adding a funny GIF or a meme to such an email, some interesting but silly facts, or maybe include a short and harmless joke.
One of our support champions will attend you shortly. You are [number] in the queue. Your wait time will be approximately [minutes]. Thank you. We appreciate your patience.