In fact, they say so themselves:

  What if I don't trust you? Is it still safe for me to use MEGA?

  If you don't trust us, you cannot run any code provided by us, so opening our site
  in your browser and entering your password is off limits. If you still want to use
  MEGA, you have to do so through a client app that was written by someone you trust.