The Tor manual says:
TunnelDirConns 0|1
If non-zero, when a directory server we contact supports it, we will build a one-hop circuit and make an encrypted connection via its ORPort. (Default: 1)
Why only one hop? Why not a regular three hop circuit?