There is a continuum of different threat models and solutions, with the big SQL database on one end, the proof-of-work blockchain on the other end, and stuff like Stellar and PBFT in the middle. Unfortunately the field is pretty immature and people tend to pick a solution and then rationalize up a threat model to match.