Doesn't IPFS use content-addressing? In other words, the url of a file is the hash, so the contents can't be changed.