The FBI training I’m forced to take at work suggests replacing characters in that manner. “Just use a $ instead of S!”

But back in like 2006 I brute forced a dump of 20 Windows passwords in that style on my old Dell single core machine in less than two seconds, and every time I’m shocked people still think this is secure.