It doesn't really provide much extra security. The factor of 3 slow-down it provides (having to check against three columns instead of one) is a small constant

It doesn't really provide much extra security. The factor of 3 slow-down it provides (having to check against three columns instead of one) is a small constant factor in the exponential task of brute-forcing.