Comment by hoytech

This is not necessarily as secure as you might expect.

See Joux's "Multicollisions in Iterated Hash Functions. Application to Cascaded Constructions"

https://link.springer.com/content/pdf/10.1007/978-3-540-2862...