It's a database that is designed to be very expensive to update but easy to verify. If someone still manages to update it with an invalid state other nodes will validate the new block and not accept it.