Blockchain in Governments

So I've always had this question, which is also sorta related to CBDCs in general.

If a blockchain or distributed ledger system is inherently trustless, how does a Government Blockchain even work? How do transactions made there or data submitted there become tamper-proof? If I remember correctly, Estonia did this already supposedly, but I'm still looking into that.

I mean, if the government controls the blockchain, we the public don't have a way to have a say in verifying the transactions, then there's no point to it being transparent or immutable since they can change it if they want to. Then how is it any different from a government digital website? I would understand if they would use another well established chain out there now, but a government would never let a third party control their transactions. They have to make a permissioned blockchain rather than one open to the public.

I just don't see any way a government blockchain is compatible with the vision of what a blockchain or crypto should be. Government blockchains are just a selling point, since they don't make transactions immutable or transparent at all. The government can change it anytime they want, like how they envisioned CBDCs to be.