How does stack cookies protect return addresses from being overwrite?

/GS compiler option Microsoft developed added an extra cookie before the return address and before returning the cookie is checked, if it is intact then return address is safe

Why would this assumption hold ? In my understanding this just makes hacker's lives a bit harder to now keep the cookie intact.