Multisig from both parties

It’s a multisig address. Each participant has a key.

Node operator?

Both parties. But if your counterparty tries to close the channel with an older state of the channel and you can prove it, you get to keep all funds in the entire channel.