The exchange of assets happens in a single transaction which is treated atomically, i.e. the transaction is only valid if both sides of the exchange happen (because otherwise the input/output asset quantities would not balance). Separately from this, you can use multisig if you want, but it's optional for the basic DvP mechanism.
