I don’t think it’s a requirement to have all 3 buttons pressed. It’s not a fail-safe, the purpose is to obscure who is responsible. So I assume two of the buttons are duds and one is live. And they probably randomly rewire them before every execution.