Hacker News Reader

My main concern with this is that files hosted in IPFS aren't necessarily immutable, so what you own according to the NFT isn't immutable either.

The "default" way of using IPFS is content-based addressing == immutable.

IPFS uses file hashes. You're thinking of IPNS.