Immutable in the sense of unchanging over time or unable to be changed. The content identifier is embedded on-chain. Yes, someone needs to hold the file, but it can be anyone, and it can be re-introduced to ipfs. The content identifier (hash) ensures that the content cannot be changed. Currently there is a swarm of nodes that hold the file, but that probably can't continue forever as the size will become prohibitive.