OK, so not so much power to dissipate.
You cén at least divide the number of pull-up / pull-down resistors by 2 by sharing a single resistor for both functions and tuing its other end either to VCC or GND.
As for ESD, for a professional board (not for a prototype), you have to add TVS to every externally-accessible connector / switch and LED (if not using light-pipes). In your case: the Ethernet and USB connectors, all screw connectors, and maybe the LEDs and push buttons.
And for both Ethernet and USB, you need to separate SHIELD from GND, with a single high-voltage (2 kV) 1206 capacitor to align both by shorting connection transcients.
Also, both Ethernet and USB signals being high-speed (480 Mbps and 100 Mbps, respectively), they need to be routed as a pair of differential signals with controlled trace impedance (90 ohms for USB, 100 ohms for Ethernet) and matched trace length, which does not appear to be the case.