diff --git a/broker_sync/cli.py b/broker_sync/cli.py
index 7e09fe5..ce4407a 100644
--- a/broker_sync/cli.py
+++ b/broker_sync/cli.py
@@ -14,7 +14,14 @@ import typer
 if TYPE_CHECKING:
     from broker_sync.models import Account
 
-app = typer.Typer(help="broker-sync: pull brokerage activity into Wealthfolio")
+app = typer.Typer(
+    help="broker-sync: pull brokerage activity into Wealthfolio",
+    # CRITICAL: rich tracebacks print all local variables on crash, which
+    # includes env-sourced credentials (WF_PASSWORD, T212_API_KEYS_JSON).
+    # Kubernetes pod logs are world-readable — leaking creds there is a
+    # security incident. Plain tracebacks only.
+    pretty_exceptions_enable=False,
+)
 
 
 @app.command("version")