Very often the tokenURI is on IPFS meaning that the URI is in fact a hash of the digital asset. The digital asset can't change because that would result in a different IPFS uri.