but whats concerning me is it also shows 26 other btc receiving addresses. Why? Is my device compromised? This is the only transaction Ive done so far.
No, your device is not compromised. When you created a new wallet, Trezor automatically generated the bunch of receiving addresses, and there's nothing to worry about. They are part of the wallet, and the purpose of this feature is to enhance your privacy. You can use any of them to receive your coin.
Also, is it normal to still show receiving/pemding after 40 minutes
Yes, but it depends on the gas fee you used. However, the mempool is decongested right now and fees are lower.