They actually are. This is standard practice and they do it all the time. You can find thousands of such letters. Here's one example.

https://www.sec.gov/Archives/edgar/data/1360951/000119312506...