Multiple Tor circuit connections when using remote node

Hi, I was wondering why it is that when I connect to an onion remote node or clearnet node, multiple connections to sites such as Google and Flickr come up when viewing my Tor circuit connections screen, rather than connecting solely to the node itself?

Another more "out there" question as well, could this pose a potential security threat as I am transferring crypto via an onion service while accessing a clearnet service simultaneously, assuming an APT has insight into Tor relay activity?

Thanks a bunch