Mega is trustworthy. You can see the client code on git, and you can check the code in the browser if you like. It’s encrypted in the browser then sent to the server encrypted and without sending the password.

You can verify it yourself, but if they were lying then some security researcher would have already made their career by finding and publicising the lie.