This is mainly because a small amount does no damage and is presumed to be accidental, but also helps decentralize since you're safest not using a large staking pool, the most popular client, the most popular hosting service, etc.
Running as a small staker is feasible because the minimum stake is only 32 ETH, you're profitable if you're online at least 2/3 of the time, and the load on an individual node is feasible for a laptop. The computational load increases fairly linearly with the amount of stake, so there's little economy of scale for a large staker.
What Tezos does is merely let you lose a different key to custody funds and to create blocks. By itself this creates the possibility of delegation.
Last but not least, with trusted hardware the difference blurs even more.
The only risk associated with delegation is that the baker will run off with the baking rewards instead of distributing them. Of course, the incentive is low since this can only be done once. The community is active is discussing the trustworthiness of bakers (which, to date, has been pretty much all of them).
The staking risk (risk of losing a bond) is entirely on the baker. This incentivizes them to make sure they're not double baking or otherwise running misbehaving nodes.