The way I understand Tor is that the "client" (say me) connects to a relay, and that relay is the only computer they connect to from then on. If that is the case, why can't a hostile relay simply run three copies of Tor modified to connect to each other, and thereby identifying me and what I am connecting to?