Zorin OS can and does.
MOK enrollment manages utilizing Secure Boot, which is programmed into the Motherboard, not into the Windows Operating System.
Remember, your Motherboard has an operating system of its own. That is BIOS and it communicates with your Operating System (Whether Windows or GnuLinux) through drivers.
The way Secure Boot works is like an attendee list at an event - Programs must be signed off to be allowed to initialize at boot. If the program is not on the list, they are not permitted to init.
Certain proprietary drivers, like Nvidia provides, are left unsigned. This can lead to the graphics being disabled from init during boot - which all indicators point to being your experience.
Disabling Secure Boot would resolve this: Except that you already enrolled MOK.
What is your terminal output for
mokutil --sb-state