Guys, you're missing an ingredient here.
By specification, the preferred destination for auto-responses is the envelope sender, that is, the SMTP-level MAIL FROM address. This isn't the From: header, nor the Reply-To: header.
With Marketo emails, unless you have the special branded sender add-on to your subscription, the envelope sender is an address @*.mktomail.com. That's why you never get actual SMTP-level bounces to your header addresses (save for some scattered bounce-like traffic). It's also the reason SPF doesn't matter for most Marketo instances.
The auto-responder spec makes it very clear that "automatic responses" should go to the envelope sender (also referred to as the Return-Path: header, which should represent the exact same address, again not the From: or Reply-To:).
Problem: it's never been accepted across the board that Out Of Office messages qualify as "automatiic responses." So the disagreement is more about whether "automatic" (seen as "machine-generated, unsolicited") includes emails that required human intervention from the mailbox owner to author, may only be sent in a reserved time window, and (in most cases with OoO) are supposed to be read as if they are human responses. That is, we know person X is on maternity leave because they originally wrote the email. It's not AI figuring out which content to send.
None of this changes the fact that implementations differ, each side saying they're equally right. But you need to keep in mind there's an entire other mailbox that you have no access to that is routinely receiving automated messages.
.png)