There are many good reasons to want to refrain from jumping to the latest kernel. Later kernels can contain regressions or experimental code.
Normally, I would recommend adhering to the vetted kernel upgrades from the development team. Zorin OS is supposed to be LTS Stable.
However, Zoringroup appears to be gunning for Wayland and the 6.8 kernel (which is a very unusual leap from 6.5 kernel for Zoringroup to make given their kernel upgrade history) is different in that it is supposed to introduce some Wayland Hardware Support.
In my opinion, this is the best way to manage kernel boot:
Set your Preferred Kernel to default boot. THis way, any later kernel can safely be installed and the user can examine and test them out, but easily revert with one reboot to their stable preferred kernel. No need for trying to hold the packages or block the upgrader tools.