They don't have the keys, but they probably can get them.

That's a strong accusation.

The only way I can think of, is by pushing an update that grabs all your keys and pushes them to their servers.

Otherwise, it's pretty decent set up (if I am to believe Moxie, which I do)