This is true for many NFTs but not all. For example, cryptopunks, autoglyphs, meebits only exist on-chain. Then there are NFTs like artblocks.io where the code to generate your NFT is on-chain and the output is determined by the transaction hash.