Only if you're specifically targeted. I know enough regex to know that nobody is going to bother trying to parse known passwords to identify patterns like that when there's a billion suckers who use 'password123' for their bank accounts.
As long as the pattern is not super predictable, and aren't dictionary words, nobody is brute forcing that.
I use GNU find every day and still have to google about the details. Only learnt about - delete the other day, good to know the position matters.