How is decentralization and security achieved on L2 scaling solutions?

I am taking about projects such as Optimism and Arbitrum. How do they ensure that validators are decentralized and honest? And if they are able to achieve security + speed, then why is the same then not achievable on L1? What is so different about L2s that they can attain scalability and security that L1 can’t?