The FBI training I’m forced to take at work suggests replacing characters in that manner. “Just use a $ instead of S!”

But back in like 2006 I brute forced a dump of 20 Windows passwords in that style on my old Dell single core machine in less than two seconds. Every passing year I’m still shocked people continue thinking this would work.