Legally speaking this is incorrect.
The company can delegate people to interact with the outside world and those people have the ability to bind the company. If they mess up beyond their pay grade then the company may have recourse on them but the company may well still be bound externally.
You still have to check if the functionary is an 'authorized agent' but if they misrepresent themselves as such then the company may well have a problem if you had no reason to believe otherwise (for instance: because of their job title or because someone with signing authority delegated the interaction with you). Such 'apparent authority' (of which this may well be a case) is the source of much confusion and many lawsuits.