The published records on the chain proves that you own #1186 ape or kitten or whatever. It doesn't even prove the hash of the picture or any other property of the image. Look at Opensea.io - NFTs for sale there are just numbers in the contracts of their issuers. These numbers correspond to images uploaded to the marketplace in the marked order. A hacker can swap images at the marketplace and suddenly the ape you own is no longer cool and top. But you still own #1186 token on the blockchain, it's just what it's pointing to is different now. This is such an unbelievable stupidity, if you don't want to use word "scam".