It only needs one or two of its three engines to land.
now they light all 3 and turn 2 off when one lights.
Also you are wrong. SN9 actually used 2 engines for the flip, not 3.
They only swapped to 3 for SN10 and the flipped worked perfectly there. The problem with SN10 was the temporary helium system they put after SN8 in so the engine was ingesting helium.
The point is that you have engine out capability both on the flip and during landing. Of course over time SpaceX need to test some of these profiles in more detail, just as they did for Falcon 9 where they tried various ways of landing.
What happens if all the engines fail?
What happens if it flies into a mountain?