No one thinks much about cybersecurity while traveling. However, email security company Tessian warns the out of office message actually plays right into the hands of threat actors and cybercriminals. It’s a social engineering attack vector that no one thinks about. The out of office message is ubiquitous and handy. But if it includes any personal information at all — such as attending a funeral or going out of the country — attackers have all the information they need to impersonate the person who is out of the office, without the attacker having to do any real work.
This is true! The nuclear option also helps the recently returned vacationer understand what is a priority and what isn’t. But, as boyd wrote, “if you just turn off your email with no warning, you're bound to piss off your friends, family, colleagues, and clients.” The blog post offers some helpful steps to make a clean break feasible — they include communicating with colleagues about the sabbatical long in advance, managing expectations of those who rely on you, creating a backdoor for true emergencies, and then, right before going away, reminding everyone about the sabbatical once again.

6. Suggest Contacting Your Colleague. Rather than providing alternative contact details, you can encourage your users to reach out a colleague. Hey (specify the Name field id)
What makes this a decent example of an OOO message is that it’s candid, (hopefully) honest, and blunt. There’s no guessing whether or not this dude is going to respond to your email this week. Also, it gives us a bit of an insight into his life right now, which helps communication in the moment and in the future. He’s burned out. Even if you did manage to reach him, it’s likely he’d be resentful, even if he didn’t say so. There’s a good chance the sender of the original email will identify with this and respect his time.