MEGA actually doesn't have the key, except for files of which they already have an unencrypted copy (since the key is derived from it).
They used to claim that your data was inaccessible without your password, but this was always a lie.